Description
In vdec, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11262030; Issue ID: MSV-9197.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| MediaTek | MediaTek chipset | MT2718, MT6580, MT6739, MT6761, MT6765, MT6768, MT6769, MT6779, MT6781, MT6785, MT6789, MT6833, MT6835, MT6853, MT6855, MT6858, MT6873, MT6877, MT6878, MT6879, MT6881, MT6883, MT6885, MT6886, MT6889, MT6893, MT6895, MT6897, MT6899, MT6983, MT6985, MT6989, MT6991, MT6993, MT8126, MT8171, MT8186, MT8… | — |
Advisories 1
- WID-SEC-2026-3251 Android Patchday September 2026: Mehrere Schwachstellen BSI CERT-Bund (WID) · Oct 25, 2026